Brnd Bx Limited (“we”, “us” “our”) are a marketing agency that provides marketing services including operating online competitions, promotions, prize draws and other marketing campaigns (“campaigns”) for and on behalf of our clients in respect of their products and services. These campaigns are open to the public to enter on our website brndbx.co.uk in accordance with our applicable campaign terms and conditions.
We are committed to protecting and respecting the privacy and security of your personal information, that means any information or data we hold or process about you. This privacy notice explains how we look after your personal information, how we collect, use, store and, as necessary, share it with others and what your rights are in relation to it.
This privacy notice applies to all visitors and users of our website and our online services and campaigns including, Brnd Bx content on social media or any other website, our mobile devices and our applications from time to time. It also relates to any personal information you provide to us by phone, SMS, email, in letters and other correspondence and in person.
For the purpose of this privacy notice, we are the data controller responsible for the protection of the personal information we hold and process about you. Brnd Bx Limited is registered in England and Wales under company registration number 10632198 with its registered office at 173 Waldegrave Road, London, TW11 8LU.
What personal information we collect about you
We collect information about you when you take part in one of our campaigns, when you contact us (for example to report a problem with our website or make an enquiry about a campaign or our services) or when you visit our website or any of our other social platforms.
This may include:
Identity Data: Your name, username, instagram handle - so that we can identify who you are.
Contact Data: Your email address and mailing address so that we can contact you
Preference Data: Information about your lifestyle habits, interests, personal preferences and opinions regarding brands and products or other information you provide to us when you fill out a campaign entry form on our website. This data will be used solely so we can aggregate it for statistical research purposes, for example to calculate the percentage of prize draw entrants with similar preferences or interests. We may share such anonymous aggregated data with our clients to help them to more effectively market their products and services, however this data will never identify you personally.
Marketing and Communications Data: Information about your preferences in receiving marketing from us where you have requested information from us or consented to us sending you information about products and services which we think you may be interested in.
Technical Data: Includes internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access our website.
Usage Data:information about how you use our website and online services including traffic data, location data, weblogs, other communication data, and the resources that you access.
Data you provide when you contact us, for example to report a problem or make an enquiry or complain, in which case we may also keep a copy of that correspondence.
How we use your personal information
We will only use your personal information where we are allowed to do so by law. This means we must have one or more lawful grounds to use it, for example to perform a contract with you, to comply with our legal obligations, to serve our legitimate business interests (where this does not conflict with your rights) or because you have given us your consent. How we use your personal information and the lawful grounds we rely on are set out below:
We would like to send you information about products and services including promotional offers and discount codes (“marketing”) which may be of interest to you. We will make sure we only send you marketing where you have requested to receive it or given us your consent
If you have consented to receiving marketing but change your mind you canopt out at any time by following the opt-out link on any marketing email and / or by contacting us at email@example.com.
Who we share your personal information with
We will not pass on your personal information except as set out in this privacy notice or with your consent. We may transfer your information to third parties as follows:
To our service providers, acting as our processors, who help us operate our campaigns and online services. These include our IT systems administration providers, post and mail delivery service providers and our automated mail service and cloud hosting providers. Also, some of our webpages may use plug-ins, applications and links to third party platforms. Clicking on those links or enabling those connections may allow third parties to collect or share personal information about you. We do not control these third-party websites and are not responsible for their privacy notices When you leave our website, we encourage you to read the privacy notice of every website you visit.
To our professional advisers including lawyers, bankers, auditors and insurers who provide consultancy, banking, legal, insurance and accounting services.
To HM Revenue & Customs, regulators and other authorities based in the United Kingdom and who require reporting of processing activities in certain circumstances.
Where we are under a duty to disclose or share your personal information in order to comply with a legal obligation or in order to enforce our terms and conditions or any other agreements.
To third parties if we choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal information in the same way as set out in this privacy notice.
In respect of third parties who process your personal information on our behalf, we expect them to respect the security of your personal information and to treat it in accordance with the law. We do not allow such processors to use your personal information for their ow purposes and only permit them to collect and process your personal information for specified purposes and in accordance with our instructions.
Security of your personal information
We will take all steps reasonably necessary to ensure that your personal information is treated securely and in accordance with this privacy notice.
As the transmission of information via the Internet is not completely secure we cannot guarantee the security of the personal information transmitted to our website and any transmission is at your own risk. Once we have received your information, we use strict procedures and security features designed to prevent unauthorised access to your information that we hold.
Transfers of your personal information outside of Europe
When you provide us with personal information in relation to a campaign or online service, that information is transferred to and stored by our third party cloud hosting provider as well as by our third party automated mail service provider acting as processor on our behalf. Both of these companies are based and may process your personal information outside of the European Economic Area (EEA)
Where we transfer your personal information outside of the EEA, we will ensure that safeguards are in place to ensure a similar degree of protection for your information as that offered within the EEA. This may include contractual protections in place with our service providers or transferring your personal information to countries or parties which are recognised as providing suitable protection by the European Commission
Please contact us (firstname.lastname@example.org) if you want further information on the specific mechanism used by us when transferring your personal information out of the EEA.
How long we hold your personal information
We will process your personal information for as long as necessary to fulfil the purpose we collected it for, including the purpose of legal, accounting and reporting requirements, and for as long as necessary for the prevention and detection of criminal activity. The period of time we retain your personal information may vary depending on the purpose for which it was collected. Where you provide information in relation to a campaign on our website we will retain your personal information for as long as required to operate the campaign and for a period after to enable us to satisfy our legal, accounting and reporting requirements.
In some circumstances you can ask us to delete your personal information: see Right to be forgotten below for further information.
Where we anonymise your personal information (so that it can no longer be associated with you) for research or statistical purposes, we may use this information indefinitely without further notice to you.
If you would like more details about the specific retention periods we apply to your personal information, please contact us at email@example.com
At any point while we are in possession of or processing your personal information, you have the following rights:
Right of access – you have the right to request a copy of the information that we hold about you. If we refuse your request under rights of access, we will provide you with a reason why.
Right of rectification – you have a right to correct any information that we hold about you that is inaccurate or incomplete.
Right to be forgotten – in certain circumstances you can ask for the information we hold about you to be erased from our records.
Right to restriction of processing – where certain conditions apply to have a right to restrict the processing.
Right of portability – in certain circumstances you have the right to have the information we hold about you transferred to another organisation.
Right to object – you have the right to object to certain types of processing such as direct marketing emails.
Right to complain to the supervisory authority – you have the right to complain as outlined at the section below Complaints and Contact.
Please email firstname.lastname@example.org if you have any queries about your rights above. You can exercise your rights above by emailing email@example.com. If a third party is involved in processing your personal information (as set out in this privacy notice) then your request may be forwarded on to them.
Complaints and Contact
If you wish to make a complaint about how your personal information is processed by us (or our third parties as described above), or how your complaint has been handled, in the first instance please email your concerns to firstname.lastname@example.org. You also have the right to lodge a complaint directly with the UK supervisory authority which is the Information Commissioner’s Office and can be contacted via the details at www.ico.org.uk.
If you have any questions regarding the use of your personal information please contact us at: email@example.com OR BrndBx Limited, 173 Waldegrave Road, London, TW11 8LU.
This privacy notice was published on 24.5.2018 and last updated on 01.10.2020.
We continually review our privacy practices and may change this policy from time to time. When we do, it will be placed on the website.